JP2005055999A - Access right management device and method, and its program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an access right management device capable of more effectively restricting an access to secret sections. <P>SOLUTION: When receiving a document file where a plurality of secret ranges are designated, an access managing server 2 makes those secret sections secret, and distributes those secret sections to a browsing terminal 6. The access managing server 2 manages the number of times of access permission to those secret sections by associating it with the secret sections and the terminal identification information of the browsing terminal 6, and when receiving an access request to the secret sections from the browsing terminal 6, the access managing server 2 returns the accessible data to the browsing terminal 6 according to the number of times of access permission. Thus, it is possible to restrict the number of times of accesses according to each secrecy of respective secret sections. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an access right management apparatus, an access right management method, and a program for managing an access right for a part of a document file.
[0002]
[Prior art]
As a method for managing the confidentiality of a document file, access rights are set for a part of the document file (confidential part). There is a way to prohibit browsing. For example, there are a method of displaying a masked portion of a confidential part to which no access right is given, and a method of blanking a secret part to which no access right is given.
However, even if access to the confidential part is restricted by these methods, if the authorized person frequently browses the confidential part, the contents of the confidential part may leak to others. .
[0003]
[Problems to be solved by the invention]
The present invention has been made from the above-described background, and an object thereof is to provide an access right management device, an access right management method, and a program thereof that make access restriction on a confidential part more effective.
[0004]
[Means for Solving the Problems]
[Access right management device]
In order to achieve the above object, an access right management apparatus according to the present invention is an access right management apparatus for a document file in which access restriction is applied to at least one confidential part, and the permitted access number for the confidential part is set respectively. The number-of-times storage means for storing the information in association with the confidential part of the document, the request receiving means for accepting an access request for the confidential part of the document file, and the access allowable number for each confidential part stored in the number-of-times storage means Determining means for deciding whether or not to permit access to the confidential part corresponding to the request, and accessible data for enabling access to the confidential part when the deciding means decides to permit access And when the determination means determines that access is permitted, the number of times is stored. And a updating means for updating the access allowable number stored by stage.
[0005]
Preferably, the number storage means stores the allowable access count in association with the confidential part and the identification information of the requester requesting access to the confidential part, and the request receiving means The access request and the identification information of the requester are received, and the determining means is based on the allowable access count stored by the frequency storage means and the identification information of the requester received by the request reception means. Decide whether to allow access to sensitive parts.
Preferably, the identification information of the requester is terminal identification information of a terminal used by the requester, and the number storage unit stores the access allowable number in association with the confidential part and the terminal identification information. The request accepting means accepts the access request and terminal identification information, and the determining means determines the allowable access count stored by the number storage means and the terminal identification information accepted by the request accepting means. Based on this, it is determined whether or not to permit access to this confidential part.
Preferably, the information processing apparatus further includes warning means for outputting warning information when the access permission count is updated by the updating means and the access becomes impossible.
[0006]
An access right management apparatus according to the present invention is an access right management apparatus for a document file in which access restriction is applied to at least one confidential part, and the allowable access count for the document file is associated with the document file. The number-of-times storing means for storing, the request receiving means for receiving an access request for the confidential part of the document file, and the confidential part corresponding to the access request based on the allowable number of accesses for each document file stored in the number-of-times storing means Determining means for determining whether or not to permit access; and transmitting means for transmitting access enabling data for enabling access to the confidential portion when it is determined that the access is permitted by the determining means; When it is determined by the determining means that access to the confidential part is permitted, the number-of-times storing means And a updating means for updating the access allowable count for each document file to be more stored.
[0007]
An access right management apparatus according to the present invention is an access right management apparatus for a document file in which access restriction is applied to at least one confidential part, and a request receiving unit that receives an access request for the confidential part of the document file; , Whether to permit access to the confidential portion corresponding to the access request based on the terminal identification information acquired by the identification information acquisition means and the terminal identification information acquired by the identification information acquisition means Determining means for determining whether or not access is permitted by the determining means, and transmitting means for transmitting access enabling data that enables access to the confidential portion.
[0008]
Preferably, the identification information acquisition unit acquires the terminal identification information indicating whether the terminal is a fixed terminal or a portable terminal, and the determination unit includes the terminal identification information acquired by the identification information acquisition unit. When indicating that the terminal is a terminal, it is determined that access to the confidential portion corresponding to the access request is prohibited.
Preferably, based on the terminal identification information acquired by the identification information acquisition unit, an attribute determination unit that determines an attribute of the terminal that has made an access request, and an attribute of the terminal determined by the attribute determination unit Notification means for notifying the right setter.
Preferably, the identification information acquisition unit further acquires identification information of a requester who makes an access request, and the determination unit includes the requester identification information and the terminal identification information acquired by the identification information acquisition unit. Based on this, it is determined whether or not to permit access.
[0009]
[Access right management method]
The access right management method according to the present invention is an access right management method for a document file in which access restriction is applied to at least one confidential part, and the allowable access count for the confidential part is associated with each confidential part. And accepting an access request for the confidential part of the document file, and determining whether to permit access of the confidential part corresponding to the access request based on the permitted access count for each confidential part stored, When it is determined that access is permitted, access enabling data that enables access to this confidential part is transmitted, and when it is determined that access is permitted, the stored allowable access count is updated. To do.
[0010]
[program]
The program according to the present invention includes a computer, and accepts an access request for the confidential part of the document file in an access right management apparatus that manages the access right of the document file whose access is restricted to at least one confidential part. Determining whether or not to permit access to the confidential part corresponding to the access request, and determining to permit access based on the number of allowable access times stored in association with each confidential part The access enabling data for enabling access to the confidential portion, and updating the stored allowed access number when it is determined to permit access when the access is determined. It is executed by the computer of the access right management device.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
Next, an embodiment of the present invention will be described.
FIG. 1 is a diagram showing the overall configuration of the document distribution system 1.
As shown in FIG. 1, a document distribution system 1 includes a distribution terminal 4 that requests distribution of a document file, an access management server 2 (access right management device) that sets and distributes an access right to the document file, and an access right is set. A browsing terminal 6 that receives the document file and a communication network 10 that connects them together.
[0012]
The distribution terminal 4 and the browsing terminal 6 are general-purpose computer terminals installed in the user's home or company, for example, and create and display a document file.
The access management server 2 sets an access right to the document file received from the distribution terminal 4 in accordance with an instruction from the distribution terminal 4, conceals at least a part of the document file, and transmits the document file to the browsing terminal 6.
[0013]
FIG. 2 is a diagram illustrating a hardware configuration of the access management server 2 to which the access right management method according to the present invention is applied.
As shown in FIG. 2, the access management server 2 includes a control device 20 including a CPU 202 and a memory 204, a communication device 22, a printer 23, a recording device 24 such as an HDD / CD device, and an LCD display device or a CRT display device. And a user interface device (UI device) 26 including a mouse / keyboard / touch panel.
The access management server 2 in this embodiment distributes a document file in which access rights are set for the confidential part, and enables access to the confidential part in response to a request from the user (requester) of the document file. At this time, the access management server 2 manages the allowable access count for each confidential part included in the document file, and subtracts (updates) the allowable access count according to the access permission for the user.
Here, the confidential part is a part of the document file and access is restricted. The confidential part is set, for example, in text units, image units, page units, or object units. The access is browsing, printing, copying, transfer, or the like. Hereinafter, browsing will be described as a specific example.
[0014]
[Access management program]
FIG. 3 is a diagram showing the configuration of the access management program 5 that is executed by the control device 20 (FIG. 2) and realizes the access right management method according to the present invention.
As shown in FIG. 3, the access management program 5 includes a confidential part setting unit 510, an allowable number setting unit 515, a concealment unit 520, a distribution unit 525, a number database (number of times DB) 530, and a release file database (release file DB). 540, a request reception unit 550, a determination unit 555, a transmission unit 560, an update unit 565, and a warning unit 570.
The access management program 5 is supplied to the control device 20 via, for example, the recording medium 240 (FIG. 2) or a network, loaded into the memory 204, and executed.
[0015]
In the access management program 5, the confidential part setting unit 510 receives a document file and access right setting information from the distribution terminal 4 via the communication device 22 (FIG. 2), and sets a range (confidential part) for setting the access right. Set. The access right setting information includes information specifying the range of the confidential part, identification information (for example, MAC address) of the browsing terminal that is permitted to be browsed, and the allowable number of accesses for each browsing terminal for each confidential part. include. The identification information of the browsing terminal may be other unique information such as an IP address or a mail address.
The confidential part setting unit 510 sets a plurality of confidential part ranges in the document file according to the access right setting information, and outputs them to the allowable number setting part 515 together with the access right setting information.
[0016]
Based on the access right setting information input from the confidential part setting unit 510, the allowable number setting part 515 determines the allowable number of accesses to each confidential part based on the document file identification information (document ID) and the confidential part identification information (secret information). (Partial ID) and the identification information of the browsing terminal are written in the number of times DB 530.
When the permitted number of times setting unit 515 writes the permitted number of times of access in the number of times DB 530, the permitted number of times setting unit 515 outputs the document file in which the range of the confidential portion is set and the access right setting information to the anonymity unit 520.
[0017]
The concealment unit 520 conceals the range set as the confidential part for the document file input from the allowable number setting unit 515 and outputs the document file in which the confidential part is concealed to the distribution unit 525. The data (accessible data) for visualizing the confidential part is output as a release file to the release file DB 540.
In this example, the concealment unit 520 conceals the confidential part by painting it in black, and outputs data indicating the content of the confidential part (hereinafter referred to as a release file) to the release file DB 540. The concealment method may be encryption or two-dimensional encoding in addition to black painting. In this case, a decryption key or the like is a release file.
[0018]
The distribution unit 525 distributes the document file (concealed) input from the concealment unit 520 via the communication device 22 (FIG. 2) in accordance with the designation of the distribution terminal 4 (FIG. 1). The number-of-times DB 530 stores the allowable number of accesses written by the allowable number-of-times setting unit 515, the MAC address, the document ID, and the confidential part ID.
The release file DB 540 stores the release file input from the concealment unit 520.
[0019]
The request reception unit 550 (request reception means, identification information acquisition means) receives the access request and the MAC address of the browsing terminal 6 from the browsing terminal 6 (FIG. 1) via the communication device 22 (FIG. 2). And output to the determination unit 555. The access request includes the document ID and confidential part ID of the document file for which browsing (access) is requested. The request receiving unit 550 may further acquire user identification information (such as a user ID or password) for identifying the user of the browsing terminal 6.
[0020]
When an access request is input from the request reception unit 550, the determination unit 555 searches the number of times DB 530 for an allowable access number corresponding to the document ID, the confidential part ID, and the MAC address. Then, the determination unit 555 determines whether or not the confidential portion can be accessed according to the permitted access count found by the search, and outputs the determination result to the transmission unit 560 and the update unit 565.
In this example, the determination unit 555 prohibits access to the confidential portion when the allowable access count corresponding to the MAC address of the browsing terminal 6 is 0 or less, or when the allowable access count is not found. When the permitted access count is 1 or more, access to this confidential part is permitted.
Note that the determination unit 555 authenticates the browsing terminal 6 using the MAC address (terminal identification information) of the browsing terminal 6 and the identification information (for example, a password) of the user of the browsing terminal 6, and this MAC address. Access to the confidential part may be permitted as many times as the number of times allowed for access.
[0021]
When the permission to access is input from the determination unit 555, the transmission unit 560 reads the release file corresponding to the confidential portion from the release file DB 540, and the browsing terminal 6 (FIG. 2) via the communication device 22 (FIG. 2). To 1).
[0022]
When the permission unit 555 receives an input indicating that access is permitted, the update unit 565 subtracts the allowable access count corresponding to the confidential portion and the browsing terminal 6 and overwrites the count DB 530.
[0023]
The warning unit 570 checks the allowable access count in the frequency DB 530 for each predetermined period. If the allowable access count is “0”, the warning section 570 indicates that the allowable access count has become 0 and this access request. The performed browsing terminal MAC address is transmitted to the distribution device 4.
Further, when the allowable access count is not found in the count DB 530, the warning unit 570 transmits to the distribution terminal 4 that there is an abnormal access and the MAC address of the viewing terminal that has made this access request. Note that the warning unit 570 may transmit the terminal name or the model name (terminal attribute information) corresponding to the MAC address to the distribution terminal 4 instead of the MAC address of the browsing terminal.
[0024]
FIG. 4 is a diagram illustrating data stored by the number of times DB 530 (FIG. 3).
As illustrated in FIG. 4, the number-of-times DB 530 stores the allowable number of accesses for each confidential part in association with the document ID, the confidential part ID, and the identification information (MAC address) of the viewing terminal.
For example, these MAC addresses are roughly classified into a MAC address of a fixed terminal and a MAC address of a mobile terminal (portable terminal). The MAC address of the fixed terminal is associated with a larger number of permitted access times than the MAC address of the mobile terminal. The MAC address of the mobile terminal may be associated with an allowable access count “0”. This makes it possible to limit access to the confidential part to a certain space (such as in a company).
In this way, the access management program 5 enables fine-grained access right settings by managing the allowable access count for each confidential part.
[0025]
FIG. 5 is a diagram illustrating a document file 600 before the concealment process is performed. FIG. 6 is a diagram illustrating a document file 700 that has been concealed by the concealment unit 515.
As illustrated in FIG. 5, the document file 600 includes text data, a table 602, and a graph 604. The table 602 and the graph 604 are set as a confidential part.
As illustrated in FIG. 6, the document file 700 is a document file in which the confidential part of the document file 600 illustrated in FIG. 5 is concealed. The document file 700 includes a blackened table 702 and a graph 704 in addition to text data.
In this way, the access management program 5 conceals the confidential part and distributes it to the browsing terminal 6 (FIG. 1).
[0026]
[Overall operation]
Next, the operation of the access management server 2 will be described.
FIG. 7 is a flowchart showing the operation (S10) of the access management server 2 (access management program 5) during document file distribution.
As shown in FIG. 7, in step 110 (S110), the access management server 2 activates the access management program 5 when receiving a document file delivery request from the delivery terminal 4 (FIG. 1).
In step 120 (S120), the confidential part setting unit 510 of the access management program 5 (FIG. 3) receives the document file and access right setting information from the distribution terminal 4.
In step 130 (S130), the confidential part setting unit 510 sets a plurality of confidential parts in the document file in accordance with the received access right setting information, and outputs them to the allowable number setting unit 515.
[0027]
In step 140 (S140), the allowable number setting unit 515 sets the allowable access number for each confidential part in accordance with the access right setting information input from the confidential part setting unit 510. The document ID of the document file, the confidential part ID, and the MAC address of the browsing terminal 6 are written in the number of times DB 530.
Further, the allowable number setting unit 515 outputs the document file in which the confidential part is set to the anonymity providing unit 520.
In step 150 (S150), the concealment unit 520 conceals the confidential part of the document file input from the allowable number setting unit 515, and outputs the concealed document file to the distribution unit 525 to be concealed. The release file for restoring the confidential part is stored in the release file DB 540 in association with the document ID and the confidential part ID.
[0028]
In step 160 (S160), the distribution unit 525 transmits the document file (concealed) input from the concealment unit 520 to the distribution terminal 6 via the communication device 22 (FIG. 2).
[0029]
In this way, the access management server 2 conceals the confidential part of the document file and distributes it to the user of the document file, generates a release file that enables browsing of the confidential part of the document file, and In the release file DB 540 in preparation for the access request.
[0030]
FIG. 8 is a flowchart showing the operation (S20) of the access management server 2 (access management program 5) when an access request is received.
As shown in FIG. 8, in step 210 (S210), the request receiving unit 550 of the access management server 2 (FIG. 3) receives the access request from the viewing terminal 6 (FIG. 1) and the MAC address of this viewing terminal. And output to the determination unit 555. The access request includes a document ID and a confidential part ID corresponding to the confidential part for which browsing is requested.
[0031]
In step 220 (S220), the determination unit 555 searches the number of times DB 530 for the permitted number of accesses corresponding to the document ID, confidential part ID, and MAC address input from the request reception unit 550.
In step 230 (S230), the determination unit 555 finds the access permitted number corresponding to the document ID, the confidential part ID, and the MAC address, and when the detected allowable number of access is 1 or more, the determination unit 555 performs access to the confidential part. The permission is determined and the document ID, confidential part ID, and MAC address are output to the transmission unit 560 and the update unit 565. Further, the determination unit 555 prohibits access to the confidential part when the access allowable number corresponding to the document ID, the confidential part ID, and the MAC address is not found or when the detected allowable number of access is 0 or less. To that effect.
The access management program 5 proceeds to the process of S240 when access is permitted, and proceeds to the process of S280 in other cases.
[0032]
In step 240 (S240), when the document ID and the confidential part ID are input from the determination unit 555 (that is, when access permission is determined), the transmission unit 555 releases the release file corresponding to the document ID and the confidential part ID. Is read from the release file DB 540 and transmitted to the browsing terminal 6.
[0033]
In step 250 (S250), when the document ID, the confidential part ID, and the MAC address are input from the determination unit 555, the update unit 565 allows access corresponding to the document ID, the confidential part ID, and the MAC address in the number of times DB 530. The number of times is selected, and 1 is subtracted from the allowable number of times of access.
[0034]
In step 260 (S260), the warning unit 570 refers to the number of times DB 530 and determines whether or not the allowable number of times of access is “0”. The access management program 5 proceeds to the process of S270 when the permitted access count is “0”, and ends the process when the access request is received otherwise.
[0035]
In step 270 (S270), the warning unit 570 identifies the MAC address corresponding to the permitted access count that has become “0”, and accesses the confidential portion to the browsing terminal 6 and the distribution terminal 4 having this MAC address. The fact that the allowable number of times is 0 is transmitted.
[0036]
In step 280 (S280), the warning unit 570 transmits to the distribution device 4 the MAC address of the browsing terminal 6 that transmitted the access request and the fact that there was an abnormal access.
[0037]
In this way, the access management server 2 transmits a release file for visualizing the confidential part in response to an access request for the confidential part. At that time, the access management server 2 can limit the access count for each confidential portion of the document file by managing the allowable access count set for each confidential portion. Further, the access management server 2 can facilitate the discovery of abnormal access.
[0038]
FIG. 9 is a sequence diagram showing an access management operation (S30) of the document distribution system 1 shown in FIG.
As shown in FIG. 9, in step 300 (S <b> 300), the browsing terminal 6 receives from the access management server 2 a document file whose confidential part is concealed. When the user performs a browsing operation of the document file, the browsing terminal 6 displays the document file in which the confidential portion is blackened.
In step 310 (S310), the user selects a blacked confidential portion and performs an access request operation on the confidential portion.
The browsing terminal 6 transmits the document ID and the confidential part ID as access request information to the access management server 2 in response to a user access request operation.
Note that the header part of the access request information includes the MAC address of the browsing terminal 6.
[0039]
In Steps 210 to 240 (S210 to S240), when the access management server 2 receives the access request information, the access management server 2 determines whether to permit access to the confidential portion based on the access request information, and permits the access. Then, the release file of the confidential part is transmitted to the browsing terminal 6.
In step 250 (S250), when the access management server 2 permits access, the access management server 2 updates the permitted access count.
[0040]
In step 320 (S320), the browsing terminal 6 receives the release file from the access management server 2.
In step 330 (S330), the browsing terminal 6 visualizes and displays the confidential part of the document file using the received release file.
[0041]
As described above, the access management server 2 according to the present embodiment can limit the number of accesses according to the sensitivity of each confidential part by managing the allowable access number for each confidential part included in the document file. To do. Thereby, the access management server 2 prevents the contents of the confidential part from leaking to unauthorized persons due to frequent access of the confidential part by the authority holder. In addition, the access management server 2 can allow an authorized person to recognize the confidentiality of each confidential part by setting the allowable access count for each confidential part in this manner, and inadvertent confidentiality. Disclosure of parts can be prevented.
[0042]
[Modification]
In the above embodiment, the access right management server 2 distributes the document file in which the confidential part is concealed to the browsing terminal 6 and transmits the release file to the browsing terminal 6 in response to the request. The confidential part was made readable. However, the method for concealing the confidential portion and making it readable is not limited to this. For example, the access right management server 2 responds to a request from the viewing terminal 6 for each viewing terminal 6. The confidential part may be made readable or concealed and transmitted to the browsing terminal 6. In other words, the access right management server 2 may distribute the confidential part of the document file in a readable and concealed manner for each viewing terminal 6, or a document in which all the confidential part is concealed uniformly as in the above embodiment. The file may be distributed to the browsing terminals 6, and the release file may be transmitted to each browsing terminal 6 to make the confidential part readable.
[0043]
Moreover, in the said embodiment, after the browsing terminal 6 makes a confidential part readable based on the cancellation | release file of the delivered document file, it becomes a problem to transfer this document file to the other browsing terminal 6. FIG.
In this case, the access right management server 2 also prescribes the transfer of the document file as the access right, generates transfer enable data for permitting or prohibiting the transfer of the document file for each viewing terminal 6, and The file is attached to the file and distributed to the browsing terminal 6. For example, the transfer enabling data prohibiting the transfer detects the transfer operation of the document file in cooperation with the viewer software of the viewing terminal 6 and converts the data of the document file to be garbled.
[0044]
【The invention's effect】
As described above, according to the access right management apparatus according to the present invention, it is possible to make the access restriction for the confidential part more effective.
[Brief description of the drawings]
FIG. 1 is a diagram showing a configuration of an entire document distribution system 1. FIG.
FIG. 2 is a diagram illustrating a hardware configuration of an access management server 2 to which the access right management method according to the present invention is applied.
FIG. 3 is a diagram showing a configuration of an access management program 5 that is executed by the control device 20 (FIG. 2) and implements the access right management method according to the present invention.
FIG. 4 is a diagram illustrating data stored in a number of times DB 530 (FIG. 3).
FIG. 5 is a diagram illustrating a document file 600 before being concealed.
FIG. 6 is a diagram illustrating a document file 700 that has been concealed by the concealment unit 515;
FIG. 7 is a flowchart showing an operation (S10) of the access management server 2 (access management program 5) at the time of document file distribution;
FIG. 8 is a flowchart showing an operation (S20) of the access management server 2 (access management program 5) when an access request is received.
FIG. 9 is a sequence diagram showing an access management operation (S30) of the document distribution system 1 shown in FIG.
[Explanation of symbols]
1 ... Document distribution system
2 ... Access management server
5 ... Access management program
510 ... Confidential part setting part
515: Allowable frequency setting section
520: Concealment unit
525 ... Distribution Department
530 ... Number of times database
540 ... Release file database
550 ... Request receiving part
555 ... Determining unit
560 ... Transmitter
565 ... Update unit
570: Warning section
4 ... Distribution terminal
6 ... Reading terminal

Claims (11)

An access right management device for a document file in which access restriction is applied to at least one confidential part,
Number-of-times storage means for storing the permitted number of times of access to the confidential portion in association with each confidential portion;
Request accepting means for accepting an access request for a confidential part of the document file;
Determining means for deciding whether or not to permit access of the confidential part corresponding to the access request based on the allowable number of accesses for each confidential part stored in the frequency storage means;
Transmitting means for transmitting accessible data that enables access to the confidential part when it is determined by the determining means that access is permitted;
An access right management apparatus comprising: an updating unit that updates an allowable access count stored by the count storage unit when it is determined by the determining unit that access is permitted. The number-of-times storage means stores the allowable number of accesses in association with the confidential part and the identification information of the requester who requests access to the confidential part,
The request accepting means accepts the access request and requester identification information;
The determination unit determines whether to permit access to the confidential portion based on the allowable access count stored by the count storage unit and the requester identification information received by the request reception unit. The access right management apparatus according to claim 1. The identification information of the requester is terminal identification information of a terminal used by the requester, and the number-of-times storage unit stores the permitted number of times of access in association with a confidential part and terminal identification information,
The request accepting unit accepts the access request and terminal identification information,
The determination means determines whether or not to permit access to the confidential portion based on an allowable access count stored by the frequency storage means and terminal identification information received by the request reception means. 2. The access right management device according to 2. 4. The access right management apparatus according to claim 1, further comprising warning means for outputting warning information when the access permission count is updated by the updating means and access becomes impossible. An access right management device for a document file in which access restriction is applied to at least one confidential part,
A number-of-times storage means for storing the allowable number of accesses to a document file in association with the document file;
Request accepting means for accepting an access request for a confidential part of the document file;
Determining means for deciding whether or not to permit access to the confidential part corresponding to the access request based on the allowable access count for each document file stored in the frequency storage means;
Transmitting means for transmitting accessible data that enables access to the confidential part when it is determined by the determining means that access is permitted;
An access right management apparatus comprising: an updating unit that updates an allowable access count for each document file stored by the count storage unit when it is determined by the determination unit that access to a confidential part is permitted. An access right management device for a document file in which access restriction is applied to at least one confidential part,
Request accepting means for accepting an access request for a confidential part of the document file;
Identification information acquisition means for acquiring terminal identification information of a terminal that makes this access request;
Determining means for determining whether or not to permit access of the confidential portion corresponding to the access request based on the terminal identification information acquired by the identification information acquiring means;
An access right management apparatus comprising: a transmission unit that transmits access enabling data that enables access to the confidential portion when the determination unit determines to permit access. The identification information acquisition means acquires the terminal identification information indicating whether it is a fixed terminal or a portable terminal,
The said determination means determines that prohibiting access of the confidential part corresponding to an access request, when the terminal identification information acquired by the said identification information acquisition means shows that it is a portable terminal. Access right management device. Attribute determination means for determining the attribute of the terminal that made the access request based on the terminal identification information acquired by the identification information acquisition means;
The access right management apparatus according to claim 6, further comprising a notification unit configured to notify an access right setter of the terminal attribute determined by the attribute determination unit. The identification information acquisition means further acquires identification information of a requester who makes an access request,
The access according to any one of claims 6 to 8, wherein the determination unit determines whether to permit access based on the requester identification information and the terminal identification information acquired by the identification information acquisition unit. Rights management device. An access right management method for a document file in which access restriction is applied to at least one confidential part,
The number of times allowed access to the confidential part is stored in association with each confidential part,
Accepting an access request for a confidential part of the document file;
Decide whether to allow access to the confidential part corresponding to the access request based on the number of allowed access times for each confidential part stored,
If it is decided to allow access, send accessibility data to allow access to this sensitive part,
An access right management method for updating a stored allowable access count when it is determined that access is permitted. In an access right management device that manages the access right of a document file that includes a computer and is restricted in access to at least one confidential part,
Receiving an access request for a confidential portion of the document file;
Determining whether to permit access to the confidential portion corresponding to the access request based on the permitted number of accesses stored in association with each confidential portion; and
Sending access enabling data to allow access to this sensitive portion if it is decided to allow access;
A program for causing a computer of the access right management device to execute a step of updating a stored allowable access count when it is determined that access is permitted.

Images